CVE-2025-30702

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Apr 15, 2025
Updated: Apr 17, 2025
CWE ID 200

Summary

CVE-2025-30702 is a vulnerability affecting the Fleet Patching and Provisioning component of Oracle Database Server. Affected versions include 19.3-19.26. This easily exploitable issue allows unauthenticated attackers with network access via HTTP to compromise the Fleet Patching and Provisioning system. Successful attacks could result in unauthorized read access to a subset of the affected component's data, with a CVSS Base Score of 5.3 for Confidentiality impacts. The CVSS Vector is: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle Database Server
  • Oracle Database Enterprise

Affected Vendors

  • Oracle

Advisories, Assessments, and Mitigations